06 - Permit/Ledger Readiness

Verdict

Tables exist and emptiness currently blocks apply, but contracts are too weak for real apply.

Live: permit rows/open=0; ledger planned dry-run rows=5; planned=137; applied=0; done=0.

Gaps: permit has no status/scope/unique constraints; expires_at and max_rows are nullable; apply does not enforce max_rows; permitted_by is free text. Ledger has no permit FK/status checks/unique active plan, uses unordered LIMIT 1, and lacks failed/partial/resume contract.

Required permit after fix: one exact collection, independent verified approver, mandatory expiry, mandatory max_rows equal approved delta, single-use lifecycle enforced by constraints.